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Abstract — The extended Euclidean algorithm (EEA) for poly- 
nomial greatest common divisors is commonly used in solving 

, the key equation in the decoding of Reed-Solomon (RS) codes, 
and more generally in BCH decoding. For this particular 
application, the iterations in the EEA are stopped when the 
degree of the remainder polynomial falls below a threshold. While 
determining the degree of a polynomial is a simple task for 

< human beings, hardware implementation of this stopping rule 

' is more complicated. This paper describes a modified version of 
the EEA that is specifically adapted to the RS decoding problem. 
This modified algorithm requires no degree computation or 
comparison to a threshold, and it uses a fixed number of 
iterations. Another advantage of this modified version is in its 
application to the errors-and-erasures decoding problem for RS 
codes where significant hardware savings can be achieved via 

. seamless computation. 

! I. Introduction 

Reed-Solomon (RS) codes are among the most widely used 
codes. Their applications range from consumer electronics 
' such as Compact Disc (CD) and Digital Versatile Disc (DVD) 
I players to optical communication and data storage systems. 
' Most high-throughput RS codec architectures are based on 
' reformulated versions lITOl . ifTsl of either the Berlekamp- 
Massey algorithm li2], ||4l or the extended Euclidean algorithm 
(EEA) 13, HD, m, ini, Ga, lini. a vanable number 
of iterations — at most 2t for correcting up to t errors — 
are used in most EEA-based decoders. One exception is the 
errors-only hypersystolic Reed-Solomon decoder proposed by 
Berlekamp et al. O that uses exactly 2t iterations regardless 
of the number of errors. Of course, decoders based on the 
Berlekamp-Massey algorithm also use exactly 2t iterations. 

In this paper, new modifications of the EEA are proposed for 
both errors-only (EO) decoding and errors-and-erasures (EE) 
decoding. First, a new modification of the EEA for errors-only 
decoding is proposed based on the ideas in (jU and ID. The 
new algorithm also uses exactly 2t iterations, thus eliminating 
the degree computation and comparison in most variants of 
the EEA (see, for example, HI). One particular hardware 
implementation (not described in this paper) of this modified 
algorithm turns out to be the same circuit as that obtained by 
implementing the RiBM algorithm of |10|, with the difference 
that in one implementation the polynomials enter and leave 



the circuit in ascending order of coefficients while in the other 
implementation the polynomials enter and leave in descending 
order of coefficients! The RiBM algorithm is based on the 
Berlekamp-Massey algorithm, and this result gives yet another 
equivalence between the Berlekamp-Massey algorithm and the 
EEA, different from those that have been described previously 
in 161 and El. 

The modified EEA proposed in this paper can be extended to 
errors-and-erasures decoding, and used to derive an errors-and- 
erasures decoding algorithm that also iterates exactly 2t times. 
This modified algorithm also combines the erasure-locator 
polynomial computation and the solution of the modified key 
equation in a seamless way. Hardware implementation of this 
algorithm eliminates not only the degree computation and 
comparison (see, e.g., [8|) but also the separate block used for 
computing the erasure-locator polynomial (see, for example, 
fl8l . 119]), thus leading to considerable savings. 

II. Notation and Preliminaries 

The codewords in a i-error-correcting cyclic Reed-Solomon 
code |4|, |2|, flel of block length n over GF(2™) are 
the polynomials C{z) = C„_iz""^ + C„_2z""^ • • • + 
Ciz + Co, with the property that the 2t successive powers 
Q,fco Q,fco+i^ . . . , Q,''o+2t-i Qf Q,^ a primitive n-th root of unity 
in GF{2"^), are roots of C{z). Here, bo can be any integer, 
but is often chosen to be or 1 for ease of implementation. 
The code has n — 2t information symbols. 

A. Errors-only Decoding Algorithms for Reed-Solomon Codes 

Suppose the codeword polynomial C{z) is transmitted and 
the received word, corrupted by errors, is R{z) — C{z) + E{z) 
where E{z) = X^ILo^-^*^*- decoder computes the syn- 
dromes of the error polynomial E{z): Sj — R{a^°'^^) — 
C{a'">+^)+E{a'">+^) = E{a''°+^), 0<j< 2t. The syndrome 
polynomial is defined as S{z) — So + Siz + ■ ■ ■ + S2t-iz'^'^~^ ■ 
If ly errors have occurred, the error polynomial E{z) can 
be written as E{z) = Yiz^^ + 1^2^*^ + • • • + Y^z'-^ where 
Yi,Y2, ■ ■ ■ , Yu, called the error values, are said to have oc- 
curred at the error locations Xi = a'^ , = a'^ , . . • , X„ = 
a'" respectively. The error-locator polynomial A(z) of degree 



V is defined to be 



(1) 



while the error-evaluator polynomial Vl{z) of degree less than 
V is defined as 

17(z) =^r,x,^" J] = (2) 

z— 1 J — IJt^^ ^—0 

The error-locator and error-evaluator polynomials defined 

above are related to the syndrome polynomial by the key 
equation: 

k{z)S{z) = Vt{z) mod z^*. (3) 

Note that S{z) is known to the decoder, while A(z) and f2(z) 
are not. As the name suggests, solving the key equation for 
both A(z) and 0(z) is the most difficult part of the decoding 
process. In this paper, we focus on the EEA algorithm ID, 
IfTJi for solving the key equation. 

After the key equation is solved, the errors can be corrected 
by finding the error locations and computing the error values. 
The error locations can be found via the Chien search: for each 
j\ < j < n— 1, the decoder tests whether or not A(a^^ ) = 0. 
If A(a-J) = 0, Ej ^ 0, that is, j G {ii,i2,--- The 
value of the j-th transmitted symbol is computed via Forney 's 
formula: 



where A'(z) 



Q - Rj + 

Ai + 2A2Z 



->Q.{z) 



(4) 



Ai + A3Z2 + 



zA'(z) 
hSAsz^ 

is the formal derivative of A(z). It is worth noting that most 
implementations of RS decoders compute and use /3A(z) and 
f5Vl{z) where /3 is a nonzero scalar whose value is immaterial: 
/3A(z) has the same roots as A(z) and so the decoder finds 
the same error locations, and (3 cancels out in dUi and so the 
decoder finds the same error values. Henceforth, we ignore 
such scalar factors in A(z) and f2(z). 

B. Errors-and-Erasures Decoding of Reed-Solomon Codes 

In some cases, the received words enter the decoder with 
some symbols specially marked as being highly unreliable 
and hence more likely to be in error than other symbols. 
These marked symbols are called erasures. For a code with 
minimum Hamming distance d^^^, any pattern of /i erasures 
and V errors can be corrected [4| as long as 2v + ^ < d^^^. 
Let Xi e, ■ • • , e denote the (unknown) error locations and 
Xi.e,--- jAT^.e denote the known erasure locations. As be- 
fore, the error-locator polynomial is defined as 

V 

KX^) = ^{\-x,,,z) 
j=i 

while the erasure-locator polynomial is defined to be 
A,(z)-[](l-X,-,z). 



Note that Ae(z) can be computed from the known erasure 
locations whereas Ae(z) is unknown. Similarly, the error- 
evaluator polynomial is defined as 



■'=1 i=lj¥i 

and the erasure-evaluator polynomial is defined to be 

■'=1 j=i,j¥=i 

where Yi ,, and ^ denote respectively the j-th error and 
erasure values. Also note that some of the erasure values might 
be zero. 

If we define the errata-locator polynomial A(z) of degree 
T] = v + fi SLS Ae(z)A(:(z) and the errata-evaluator polynomial 
n{z) as Ae(z)rie(z) + A^ (z)rie (z), then the key equation (O 
still holds for the errata-locator and errata-evaluator polyno- 
mials. Furthermore, the 77 errata locations can be obtained 
from the errata-locator polynomial by the Chien search and 
the correct values of the codeword symbols can be computed 
using Forney's formula. Note that the errors-only decoding is 
simply the special case of the errors-and-erasures decoding 
where A^z) — 1 and r2c(z) — 0. As in errors-only decoders, 
typical implementations compute the same scalar multiple of 
all these polynomials, and the value of this scalar does not 
affect the results of any subsequent computations. 

C. Structure of RS Decoders 

As described above, the decoding of RS codes involve three 
successive stages — syndrome computation (SC), key equation 
solving (KES), and errata correction (EC). The implementation 
of syndrome computation and errata correction, which is 
described in, for example, lEJ-llH is generally straightforward 
and will not be discussed further in this paper. Here, we will 
focus on the implementation of key equation solving, which 
is the most difficult part of the decoding process. 

III. Modified EEA for Errors-only Decoding 

A. Key Equation Solution via the EEA 

Sugiyama et al. ifTJl first pointed out that the extended 
Euclidean algorithm for computing the polynomial greatest 
common divisor (GCD) can be used to solve the key equation 
(|3]l. The EEA, tailored to solving the key equation, can be 
stated as follows: 

EEA for Errors-Only Decoding: The EO Algorithm 

1) Initialization: Set v^°\z) ^ z^*, w(i)(z) ^ 5(z), 
x^^^z) ^ 0, x^^^z) <- 1, and j ^ 1. 

2) Iteration: While deg [w^^' (z)] > t. 

Divide v^^^^\z) by w(^^(z) to obtain both 



the quotient q^^^z) 

remainder v^^~^'^\z) 
Set a:(j'+i)(z) 



and the 



w(j-i)(z)"- g(j)(z)t;(j)(z). 
a;(^-i)(z) -g(j)(z)a;(j')(z). 



Set j ^ j + 1. 

3) Output: A(z) = a;(j)(z), Vl{z) = v^i\z). 



Let k denote the value of j when the EO algorithm stops. 
Then, the outputs a;'*^' (z) and u*^*^) (z) are scalar multiples of 
A(z) and fl{z) as defined in ([T]) and ^ since ^'■'^•'(O) is not 
necessarily 1. Also, it can be shown that the polynomials 

= fliz) computed by the EO 
algorithm have degrees di that form a strictly decreasing 
sequence with do = 2t, dk-i = 2t — u, and dk = v. 

The drawbacks to efficient implementation of the above 
algorithm are as follows. 

• The degree dj^i — dj of the quotient polynomial g*^^^(z) 
can vary with j, and thus Step 2 of the EO algorithm 
requires a variable number of computations. This compli- 
cates the control mechanism. Furthermore, it is necessary 
to divide the coefficients of v^^~^''{z) by the leading 
coefficient of in order to obtain the quotient 
polynomial q(^^(z). 

• Determining the stopping condition deg [w*^^^ (z)] < t 
is difficult since data needs to be gathered from many 
different cells in the circuit. 

These two drawbacks have motivated many improvements. 

B. Partial Division and Cross-Multiplication 

Brent and Kung |5| proposed a systolic array implemen- 
tation of the polynomial GCD algorithm in which each of 
the polynomial division operations involved is broken into 
a sequence of partial divisions, as humans often do in the 
"long division" method. In fact, this idea had been pointed 
out even earlier (see, for example, 121). Brent and Kung 
also proposed using cross multiplications to avoid dividing 
one polynomial coefficient by another. These notions can be 
explained as follows. Let U{z) and V{z) denote polynomials 
of degrees r and s respectively where r > s. Then, in the 
"long division" of U{z) by V{z), the first step consists of 
subtracting y^z''^^V{z) from C/(z) to cancel out the highest 
degree term in U{z). If the remainder has degree at least s, 
a different multiple of V{z) is subtracted to cancel out the 
highest degree term in the remainder, and so on. But, 

gcd(C/(z), V{z)) = gcd((7(z) - ^z^-'Viz), Viz)) (5) 
= gcd{VM{z) - UrZ^-'Viz), Viz)) (6) 

where (|6| follows from (|5]l because gcdi Aiz), B{z)) = 
gcd{f3Aiz), B{z)) for any nonzero scalar /?. Thus, changing 
C/(z) to VsUiz)-Urz'-''Viz) instead of f7(z)-^z'-"F(z) 
avoids a division while still zeroing out the highest degree term 
in t/(z) and still having the same GCD. Since the computation 
of a;*^-'+^'(z) in the EO algorithm is of exactly the same form 
as the computation of u(^+^'(z), a similar calculation can be 
used to update these polynomials as well. 

These two basic ideas have been used in different ways 
by many researchers to design different algorithms for GCD 
computation and RS decoding (see, for example, Q, ifTTl . 
lll2), 1 15 1, 1 17 1). All these algorithms actually compute scalar 
multiples aA(z) and ailiz) of the error-locator and error- 
evaluator polynomials defined in ([T]i and (|2]i respectively. 
Our architectures also use the ideas of Brent and Kung, but 



compute az*A(z) and az^n{z) where i > 0. Since the nonzero 
roots of az*A(z) are the same as those of A(z) and the 
factors az* cancel out in Forney's formula (|4|i, such factors 
are inconsequential and can be ignored. 

As noted before (2], (3], [5], a polynomial division can 
be broken up into a sequence of partial divisions for ease 
of implementation, and the cross-multiplication technique can 
be used to avoid divisions of field elements f3l, [31, fTTl. 
The same ideas can be adapted to eliminate the comparison 
of deg[w^^'' (z)] with t as well. Our modification of the EEA 
solves the key equation in exactly 2t steps; rather than in at 
most 2t steps as in previous work by others. When v < t errors 
have occurred, our algorithm computes z''A(z) and z'^iliz) in 
21/ steps instead of A(z) and f2(z). Our algorithm is also set up 
so that each of the additional 2t — 2v steps simply multiplies 
the results by z so that after a total of 2t steps, our modification 
of the EEA has computed z"^^'" K{z) and z'^*-'''Vt{z). These 
give the same error locations and error values as do A(z) 
and i7(z). The advantages to our approach are that the degree 
checking is avoided completely, and the key equation solution 
is produced with a fixed latency, both of which properties 
simplify the control mechanism in an implementation. 

C. The Modified EEA 

We claim that the following modified version of the EEA 
solves the key equation for RS decoding, producing polyno- 
mials X{z) ^ az2*-'^A(z) and Viz) = az'^^-^'Vliz). 
Algorithm I (Modified Euclidean Algorithm) 

1.1 Initialization: 5^0, ?7(z) ^ z^*, V{z) 4- S'(z), 
Wiz) ^ 0, and Xiz) ^ 1. 

1.2 Iteration: Repeat 2t times: 

a) Set Viz) ^ zViz), Xiz) <~ zX(z), 6^6-1. 

b) If V2t 7^ and 5 < 0, 

set S < 5 and swap U ^ V and W ^ X. 

c) Set 

Viz) ^ U2tViz) - V2tUiz), 
Xiz)^U2tXiz)~V2tWiz). 

1.3 Output: A(z) = Xiz), 17(z) = Viz), and S. 

If ly < t errors have occurred, then after 2z/ iterations of 
Step 1.2 in Algorithm I, Viz) = z^*-''''-!?;^) (z) = z^niz) 
and Xiz) = z^*'^'^''-^x'^^\z) = z'^A(z) where scalar factors 
are ignored. When Step 1.2 is iterated 2t — 2v more times, 
Xiz) and Viz) are multiplied by z (Step L2a) and the 
ignorable scalar factor \J2t (Step 1. 2c) each time. Hence, when 



Algorithm I ends, X(z) 



^A(z), Viz) = z^*-''f7(z). 



and b ^ 2v — 2t < ^. \i V > t, then Algorithm I terminates 
with (5 > 0. In practice. Steps I.2a-I.2c are not executed in suc- 
cession but combined into a single calculation that computes 
a Boolean control variable SWAP = (^2*-! ^ 0) A ((5 < 0) 
and then simultaneously sets 



Viz) 
Xiz) 

iUiz),Wiz),b) 



U2tzViz)~V2t~iUiz), 
U2tzXiz) ~ V2t-iWiz), 

jizViz),zXiz),-6-l), if SWAP = 1, 
\iUiz),Wiz),S -1), if SWAP = 0. 



Note also that 5 must be initialized to —1 for this modified 
computation to work properly. We refer to this variation of 
Algorithm I as Algorithm I*. The following theorem summa- 
rizes the results of Algorithms I and I*. 
Theorem \: \f v < t errors have occurred, then when 
Algorithm I or I* terminates, (5 = 2i^ — 2t— 1<0 and 

= /3A,_i, /3Ao, 0, 0), 

{V2ti V2t-1, V2t-vi V2t-v-l Vo) 

= (0, /3r!,_i, (3no, 0, 0). 

where (3 is nonzero. If Algorithm I or I* terminates with J > 0, 
then more than t errors have occurred and the error pattern 
E{z) is not correctable. 

IV. Errors-and-Erasures Decoding 
In errors-and-erasures decoding (see, for example, lfT4]| . lH, 
El, HSl, ID), the key equation (O relating the errata-locator 
polynomial A{z) = Ae(z)Aj(z) and the errata-evaluator 
polynomial il{z) is usually solved via the following three steps 
executed in succession: 

1. using the known erasure locations g, 1 < i < fi to 
compute the erasure-locator polynomial Ae{z) and the 
modified syndrome polynomial 

S{z) = A,{z)S{z) mod z^\ 

2. solving the modified key equation 

Ae(z)5(z) =n{z) mod z^* 

for the error-locator polynomial Ae(z) and the ermta- 
evaluator polynomial Vt{z) 

3. multiplying Ke{z) by Ae(z) to obtain the errata-locator 
polynomial A(z). 

The computations of Ae(z) and S{z) can be implemented as 
/i-iteration procedures in which initial values Ae(z) = 1 and 
S{z) — S{z) are multiplied successively by (1 — X\,^z\ (1 — 
A"2,e2;), . . . , (1— A"^t_ez). Alternatively, Ae(z) can be computed 
as described above and then the polynomial product A^ (z)S{z) 
computed in /i + 1 further iterations (cf. [IS]). Of course, if 
there are no erasures, then these calculations do not need to 
be carried out. Next, the (modified) key equation is solved in 
at most 2t — /i iterations via a slightly modified version of 
the extended Euclidean algorithm for errors-only decoding. A 
slightly modified version of the Berlekamp-Massey errors-only 
decoding algorithm also can be used for this purpose. Finally, 
the last of the three steps above is not strictly necessary, but is 
usually implemented (in fact, embedded into the second step) 
because it is more convenient to use A(z) in computing errata 
values via Forney's formula. 

It was pointed out by Blahut [4} that if the registers used to 
compute Ae(z) are initialized to A^{z) instead of 1, then the 
iterations during the solution of the modified key equation pro- 
duce A(z) = Ae{z)Ae{z) directly and thus the third step above 
is in effect embedded into the key equation solution. Blahut 
(lU also noted that for the Berlekamp-Massey algorithm, it is 
unnecessary to compute the modified syndrome polynomial: 



if the registers used to compute Ae(z) are initialized to 
Ae(z) instead of 1, then the "discrepancies" calculated in 
the Berlekamp-Massey algorithm are exactly those needed for 
solving the modified key equation, and the algorithm produces 
A{z) directly instead of A^{z). Unfortunately, reformulated 
Berlekamp-Massey algorithms such as the riBM and RiBM 
algorithms of ifTOl as well as all key equation solvers that 
are based on the extended Euclidean algorithm do need S{z). 
However, these algorithms are able to embed the third step 
above into the key equation solution. Finally, it has been noted 
by several researchers that the operations used for the solution 
of the key equation can be adapted to the computation of A^{z) 
or S{z) or both. Thus, the same hardware can be used in 
these calculations, which reduces the number of finite-field 
multipliers required. 

A. Reformulation of Errors-and-Erasures Decoding Algo- 
rithms 

As pointed out in lfT4l . the modified key equation 
A^{z)S{z) = Vl{z) mod z^* can be solved by using the 
extended Euclidean algorithm shown below: 
EEA for Errors-and-Erasures Decoding 

1) Initialization: Set ^ z'^\ v^^\z) 



(z) ^ 0, ^ 1, and j ^ 0. 



Siz), 



2) Iteration: WhUe deg [w^^'H-^)] > t + 

Divide v^^~^\z) by w(^^(z) to obtain both 
the quotient q^^\z) ^ ^ ^u) (z) ™^ 
remainder i;*^-'+^'(z) ^ v'^^^^^{z) — q^^\z)v'^'^\z) . 

Set a;(J+i)(z) ^ x^^-^^z) - q(^\z)x^i\z). 

Set ]^] + 1. 

3) Output: Ae(z) = x^^\z), VL{z) = v^^\z). 

This algorithm is clearly similar to the EO algorithm for errors- 
only decoding. In fact, the only differences between the two 
algorithms are the initial values of v^^\z) and the stopping 
condition. Hence, direct implementation based on the above 
algorithm suffers the same problems we described in Section 
III. A. Using the same reformulation steps as in Section III, 
the above algorithm can be modified to a {2t — /i)-iteration 
algorithm that eliminates the degree checking and produces 
z'^Ae(z) and z^Q,{z) instead of Ae(z) and Vl{z) respectively. 

As mentioned above, the operations used to compute 
A(z) = Ae(z)Ac(z) in the third step can be embedded in 
the modified Euclidean algorithm by initializing x^^^ [z) and 
a;'^^-'(z) to scaled values ■ A^{z) and 1 • A^{z) respectively. 
Note that the updates of x'--'^(z) depend on q'^^\z), which 
are not at all affected by the change in the initial values. 
Thus, each x'^^^ (z) is scaled by A^{z), leading to a final output 
Ae(z)A,(z) = A(z). 

In order to combine the computation of Aj(z) and S{z) 
with the modified Euclidean algorithm (with the computation 
of A(z) embedded) into a single algorithm with 2t iterations, 
we use a polynomial tj->{z) = 'Yl!i=i A^i,eZ^~^ — ^i^'' 
that can be formed easily during the syndrome computation 
stage by saving the marked erasure locations. We allow for 
the possibility that more than 2t erasures have occurred, even 



though such an errata pattern is not decodable. Our reformu- 
lated EEA for errors-and-erasures decoding is as follows: 
Algorithm n 

1) InitiaUzation: 5 < 1, U{z) ^ z'^\ V{z) ^ S{z), 

X{z) ^ 1, W{z) ^ 0, and V(^) = Ef=i Xi,eZ'-\ 

2) Iteration: Repeat 2t times: 

Set FIRST ^ (V'o 0). 
SWAP ^ (-FIRST) A {V2t-i ^ 0) A {S < 0). 
^ Uu2t,V2t-i), if FIRST =0, 
^ [(V-o,!), if FIRST = 1. 

'-6-1, if SWAP = 1, 
(5-1, if SWAP = and FIRST 
if FIRST = 1. 



(7,0 



0, 



s, 



ij{z) 
V{z) 



Hz) 



7 • zV{z) — 



X{z) ^ 7 • zX{z) 




if FIRST 
if FIRST 



0, 
1. 



if FIRST =0, 
if FIRST = 1. 



U{z) 



W{z) = 



( zV{z), if SWAP = 1, 

[U{z), if SWAP =0. 

'zX{z), if SWAP = 1, 

W(z), if SWAP =0. 



3) Output: A(z) = X{z), n{z) = V{z), 5, and tPo- 
This algorithm uses a Boolean control variable FIRST that 
has value 1 only when the erasure locations are being 
processed to compute A^{z) and S{z). During this time, 
SWAP is always and 7 is set to the erasure location being 
processed currently. For each erasure location 7, Algorithm 
II sets V{z) to V{z)[l - jz] and X{z) to X{z)[l - jz], thus 
obtaining S{z) and A^{z) after all the /x erasure locations 
have been processed one by one. Note that the update 
ip{z) ^\tjj{z) / z\ discards the erasure location that was just 
processed and replaces it by the next erasure location to be 
processed, and thus FIRST becomes zero after /x iterations. 
From this point onwards, the updates of all the polynomials 
and of 6 are the same as in Algorithm I*, and thus solve the 
modified key equation in 2t — /x iterations. We remark that 
the received words with no erasures can be decoded correctly 
by Algorithm 11 as well. In fact. Algorithm I* corresponds to 
the special case of Algorithm II where /u = and FIRST is 
always 0. Similar to Theorem 1, we have 
Theorem 2: Suppose that v errors and ji erasures have 
occurred where 2z/ + /x < 2t. Let rj = v + fj, denote the total 
number of errata. Then when Algorithm II terminates, ^ < 
and 



{X2t, 




X2t-r}, 


X2t-ri-l ■ ■ 


• , ^0) 


= (fiK 


/3A^-i, • 


■, /3Ao, 


0, 


•, 0), 


{V2i, 


V2i-l, . 


V2t-ri, 


V2t-ri-l 


•, Vo) 


= (0, 






0, 


., 0). 



where f3 is nonzero. If Algorithm II terminates with 5 > or 
with 7^ 0, then the errata pattern is not correctable. 

V. Concluding Remarks 

In this paper, modified Euclidean algorithms that use fixed 
numbers of iterations are proposed for both errors-only and 
errors-and-erasures decoding of RS codes. The salient feature 
of fixed numbers of iterations leads to simpler control mech- 
anisms and hence hardware savings. The new algorithm for 
errors-and-erasures decoding seamlessly combines the three 
steps typically used in previously proposed architectures into 
one procedure, leading to hardware savings. 
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